tinc - Dec 2008 - Virtual LAN over Tinc?

I actually sent this to Guus directly before realizing I could send it to
this mailing list.  So, Sorry about that Guus!!


I'm trying to connect two remote networks together with Tinc.

I have Tinc installed on a host (host name is "donald") at location A,
and
Tinc installed on a host (host name is "irfan") at location B.

Right now, donald and irfan can talk to eachother.

However, donald cannot talk to anything on irfan's lan.   And irfan cannot
talk to anything on donald's lan.

For the life of me I can not figure out what the next step is.

Each site has a tap adapter.

Adapters on Donald
Ethernet adapter Tinc:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : TAP-Win32 Adapter V9 #2
        Physical Address. . . . . . . . . : 00-FF-3B-30-70-81
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.2.0
        Subnet Mask . . . . . . . . . . . : 255.255.0.0
        Default Gateway . . . . . . . . . :

Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Ethernet NIC
        Physical Address. . . . . . . . . : 00-40-2B-60-C2-AB
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.11
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1

Adapters on Irfan
Ethernet adapter Tinc:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Win32 Adapter V9 #2
   Physical Address. . . . . . . . . : 00-FF-91-78-9E-7A
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . :
fe80::5c44:853f:c710:67d3%12(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.222.0(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . :

Ethernet adapter Network Bridge:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : MAC Bridge Miniport
   Physical Address. . . . . . . . . : 02-11-43-AC-52-ED
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . :
fe80::3172:6147:f1fa:f349%15(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.222.12(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.222.1


You can see that Irfan has a bridge adapter.  It is bridged only to a single
Local Area Connection.   I created the bridge because I thought I would need
to bridge the local area connection with the Tinc connection, to expose the
networks behind eac host.  However, when I bridge them, I get Loopback
errors.

Here are my configuration files.  The "name" and "connectto"
are opposite
for each site.

tinc.conf
Name = Donald
ConnectTo = Irfan
Interface = Tinc
Mode = switch

Donald host file;
Address = argyle.thruhere.net
Compression = 0
Port = 8002
Subnet = 192.168.2.0/24
-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----

Irfan Host file;
Address = irfan.selfip.net
Compression = 0
Port = 8222
Subnet = 192.168.222.0/24
TCPOnly = yes
-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----


thanks for any help you can offer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://www.tinc-vpn.org/pipermail/tinc/attachments/20081206/072995e6/attachment.htm

On Sat, Dec 06, 2008 at 04:36:18PM -0500, Donald Pearson wrote:
> I actually sent this to Guus directly before realizing I could send it to
> this mailing list.  So, Sorry about that Guus!!
No problem.

[...]
> However, donald cannot talk to anything on irfan's lan.   And irfan
cannot
> talk to anything on donald's lan.
[...]
> I created the bridge because I thought I would need
> to bridge the local area connection with the Tinc connection, to expose the
> networks behind eac host.  However, when I bridge them, I get Loopback
> errors.
You are using switch mode, so you should either bridge the tinc interface with
the LAN interface, set up proxy-ARP or manually add gateway routes so that
packets from donald to irfan's LAN get forwarded by irfan's OS.
Alternatively,
don't use switch mode if you don't really need it.

But what kind of loopback errors are you getting?

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url :
http://www.tinc-vpn.org/pipermail/tinc/attachments/20081207/9ac16854/attachment.pgp